CVE-2026-96601 — Abdurrab5 online-makeup-store Admin Login index.php sql injection
A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of t…
Published: 2026-09-23 · CVSS: 6.9 · CVSS 4.0
A vulnerability was detected in Abdurrab5 online-makeup-store. This affects an unknown function of the file index.php of the component Admin Login Handler. The manipulation of the argument id/password results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7